topic Re: Prisma Access tunnel down in Prisma Access Discussions

Prisma Access tunnel down

solarsunny — Wed, 01 Feb 2023 08:19:25 GMT

Hi Expert,

How to configure the Prisma Access Tunnel Status in Panorama to forward the email when tunnel down?

The tunnel status is in system log? And I just filter the status in system log is ok?

Re: Prisma Access tunnel down

anuj_mor — Wed, 01 Feb 2023 16:18:15 GMT

Two ways...1st you look at system logs for any tunnel status error and 2nd..you can configure path monitoring for the static route created for the VPN tunnel and if the tunnel monitoring fails, it will log a path-monitor-failure entry in system logs, which indicates that tunnel has gone down.

Re: Prisma Access tunnel down

nikoolayy1 — Tue, 14 Feb 2023 09:42:25 GMT

Also check the action as it could be Alarm but the logs to show it wrong (visual bug) or for there to an exclusion:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/objects/objects-security-profiles/actions-in-security-profiles

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/threat-prevention/create-threat-exceptions

Still if you don't do tcpdumps for the drop and transmit stages you can't say that palo alto is allowing the traffic. If it is better open a case .

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CloNCAS